steakhouse[.]financial

steakhouse.financial is currently active and resolves to 82.198.229.115, an address assigned to Synetrix Ltd in Germany. The domain was registered on 30 March 2026 through OVH SAS and uses the authoritative name servers dns101.ovh.net and ns101.ovh.net. TLS is provided by a Let’s Encrypt certificate (R13) and the site redirects with HTTP status 307. Infrastructure fingerprinting shows the presence of LiteSpeed web server, Cloudflare services, Hostinger hosting, and client‑side libraries crypto‑js and cdnjs delivered over HTTP/3. The page title “Steakhouse – Institutional DeFi Vaults” suggests an investment‑oriented landing page, consistent with the classified scam type “Investment Scam”. The domain appears on a single security blocklist and is already blocked by PhishDestroy. A VirusTotal scan involving 94 antivirus engines returned no detections, but the absence of flags does not imply benign intent. At present, no additional content analysis is available; the exact visual or credential‑capture mechanisms have not been disclosed. Defenders should block the domain and its IP at network perimeter, monitor DNS queries for the OVH name servers, and consider adding the host to threat‑intel feeds. Ongoing observation is recommended to capture any evolving payloads or phishing pages that may be deployed.